Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

Ice Fog (threat actor)

Risk

Low

0 techniques 2 tools/malware 0 vulnerabilities 0 IOCs 0/7 stages covered

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

No data

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (2)

Dagger Three Fucobha Backdoor

Indicators of Compromise (0)

None linked.

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

3/4

Adversary

Confidence

70%

Ice Fog

Type: Nation-State Active

Dagger Panda IceFog ICEFOG Fucobha Trident +5 more

Infrastructure 0 IOC(s)

No infrastructure indicators linked.

Capability

70%

2 tool(s)/malware

Dagger Three Fucobha Backdoor

Victim

70%

Targeted Sectors

government telecommunications defense

Targeted Countries

TW KR JP

Diamond Model Meta-Features

Result

Active

Direction

Unknown

Methodology

Nation-State

Resources

government

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges